[ozzyman700]

You can see here [2] what entities HIPPA applies to. A app would probably fall under the rightmost "clearinghouse" column. But, that is only if the app receives data from another cover entity. If the app uses data provided voluntarily from and by the user to the app, the app is not a covered entity. [1]

[1] https://blog.focal-point.com/when-does-hipaa-apply-to-health... [2] https://www.hhs.gov/hipaa/for-professionals/covered-entities...

[nopenopenopeno]

This is a big help! Thanks.

Aren’t the apps just matching providers and hosting communication? In which case the providers fall under the first column? At some point, there must be a provider, right?